53555e1cd1bb37441658549fa8476f85d941ee508230a752386f87403ef88be6 | Triage

Sharing

General

Target

file.exe
Size

398KB
Sample

230504-cb4xdshe88
MD5

04d61e9de28c85e4150becf2fae7f073
SHA1

2f9ab26217442908e2266c81811a4839b519a61a
SHA256

53555e1cd1bb37441658549fa8476f85d941ee508230a752386f87403ef88be6
SHA512

62a47998cace873826d9a383df1f580d1fa1cd308cce3dd4b5829b359027574afac018cfc98124f60ccd70bafa57ee97e02702df7951109461ae184eb15a7ef1
SSDEEP

6144:Ml81qqYeQImLfMwrFMltRNCYjHwXBnZ3dlMft70S2KqJ4830:Ml8o1eQImwwRMlHMXBZ38fCSdyh0

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  file.exe
- Size
  
  398KB
- MD5
  
  04d61e9de28c85e4150becf2fae7f073
- SHA1
  
  2f9ab26217442908e2266c81811a4839b519a61a
- SHA256
  
  53555e1cd1bb37441658549fa8476f85d941ee508230a752386f87403ef88be6
- SHA512
  
  62a47998cace873826d9a383df1f580d1fa1cd308cce3dd4b5829b359027574afac018cfc98124f60ccd70bafa57ee97e02702df7951109461ae184eb15a7ef1
- SSDEEP
  
  6144:Ml81qqYeQImLfMwrFMltRNCYjHwXBnZ3dlMft70S2KqJ4830:Ml8o1eQImwwRMlHMXBZ38fCSdyh0
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer